$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40/feb035d0-a74a-3791-8fee-e996319d6a19.roa File: feb035d0-a74a-3791-8fee-e996319d6a19.roa (raw, json) Hash identifier: bISosbMo01q+2OhwhiHfGe9sUCNaEb6atnbF+7aIPec= Subject key identifier: 3C:1A:90:7D:73:5D:15:7F:60:6A:31:C9:8C:BD:AD:7B:EF:69:F1:E9 Certificate issuer: /CN=a1b7e801-0cb9-4602-b697-f6df0c2beb40 Certificate serial: 010D0C9F43285849E91FA6FA04427D6868312280 Authority key identifier: 98:6A:28:EE:B7:EC:65:16:13:49:EA:17:75:6F:A5:D3:07:5C:3B:36 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40/feb035d0-a74a-3791-8fee-e996319d6a19.roa Signing time: Tue 20 May 2025 01:00:49 +0000 ROA not before: Tue 20 May 2025 01:00:49 +0000 ROA not after: Mon 18 Aug 2025 01:00:49 +0000 asID: 139341 IP address blocks: 104.255.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40/a1b7e801-0cb9-4602-b697-f6df0c2beb40.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40/a1b7e801-0cb9-4602-b697-f6df0c2beb40.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e9:1f:a6:fa:04:42:7d:68:68:31:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1b7e801-0cb9-4602-b697-f6df0c2beb40 Validity Not Before: May 20 01:00:49 2025 GMT Not After : Aug 18 01:00:49 2025 GMT Subject: CN=8a0b3296-fa7c-4f2e-9572-46c1609844a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:52:30:47:49:c2:27:26:5e:ac:28:75:cb:b5: 55:87:c9:e8:c7:06:9b:c2:a4:ac:91:42:f8:b7:c2: d6:3c:1b:88:23:f3:25:d8:1d:de:ce:65:d9:ea:4d: 51:49:65:35:48:db:c0:56:17:f8:b9:ce:74:1f:68: 70:b5:ad:ed:2e:8d:a8:21:5d:22:58:e4:2d:44:be: f0:19:9f:e1:f4:e0:42:a8:ad:e2:73:c6:b7:18:44: a1:14:c8:22:fd:66:dd:42:a7:2b:c1:2b:fc:ef:c4: a9:f7:d0:a9:4b:23:a9:3f:1d:b2:6a:c7:df:88:18: ec:dd:3c:d8:9e:35:1b:af:40:c6:e3:c6:d5:60:0d: 2e:10:73:19:c5:d3:76:e7:94:4f:04:cf:9d:bb:03: a4:25:69:fd:45:c1:e7:b6:08:72:4c:22:8a:94:a1: 11:e3:20:ae:8a:12:8f:a0:b4:8e:3c:e5:23:a7:16: 36:50:37:c1:52:30:ba:09:ba:a2:ee:f0:76:70:3a: d6:d7:03:c4:f2:07:7b:b8:79:68:82:ed:56:4c:6c: 4e:d5:4e:f5:59:b8:30:8c:96:04:7e:39:69:37:75: 51:15:b8:69:51:b5:49:66:89:4a:14:91:c8:99:86: 15:d5:9d:dd:de:f3:2b:bb:dc:26:d4:0f:4f:f7:b4: 3a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:1A:90:7D:73:5D:15:7F:60:6A:31:C9:8C:BD:AD:7B:EF:69:F1:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40/feb035d0-a74a-3791-8fee-e996319d6a19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40/a1b7e801-0cb9-4602-b697-f6df0c2beb40.crl X509v3 Authority Key Identifier: keyid:98:6A:28:EE:B7:EC:65:16:13:49:EA:17:75:6F:A5:D3:07:5C:3B:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40.cer sbgp-ipAddrBlock: critical IPv4: 104.255.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:3e:aa:4c:fb:38:92:6b:1d:7b:d3:48:cf:bb:7c:32:aa:32: 67:05:a7:eb:fd:52:82:a1:3d:41:41:51:8e:12:f0:f5:03:ba: f4:ac:5e:c1:42:0b:e9:eb:e4:e9:95:7a:c0:98:91:e0:1a:7c: 21:e7:f3:f4:02:cf:8a:b8:5a:58:6d:12:03:b7:22:10:fd:16: 6a:c7:d2:4b:9e:ae:b2:a2:97:aa:4f:79:8e:ce:c2:30:d3:1b: 8c:0c:44:22:50:47:b6:e9:01:5e:c8:8c:d9:27:f9:05:2e:54: 94:fc:27:70:d2:77:d4:1d:60:6a:ff:22:99:23:78:d8:01:f7: 26:30:e4:a1:b5:04:7e:c3:bb:81:e8:14:e9:23:b0:67:f7:78: 75:94:a8:bc:d5:93:e2:a3:a9:48:3a:17:04:cc:6d:bb:0a:4d: fd:63:27:ac:ee:3c:d0:f5:4f:b0:8e:b8:40:01:0b:f9:82:80: e2:37:cc:cd:9c:f2:05:84:76:2c:cb:3c:4a:7f:30:8c:c2:7a: 04:d9:bd:e9:94:2b:2c:d9:9a:b6:d4:a7:b5:24:e3:28:35:dd: 71:bb:e8:e4:6e:1c:17:20:60:5d:1b:12:e7:e1:7b:6a:14:de: 35:97:0b:15:94:8f:54:b0:a8:ea:54:04:a3:6c:8e:04:a0:4f: ab:2e:4f:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnpH6b6BEJ9aGgxIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFiN2U4MDEtMGNiOS00NjAyLWI2OTctZjZkZjBjMmJl YjQwMB4XDTI1MDUyMDAxMDA0OVoXDTI1MDgxODAxMDA0OVowLzEtMCsGA1UEAxMk OGEwYjMyOTYtZmE3Yy00ZjJlLTk1NzItNDZjMTYwOTg0NGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlIwR0nCJyZerCh1y7VVh8noxwabwqSskUL4 t8LWPBuII/Ml2B3ezmXZ6k1RSWU1SNvAVhf4uc50H2hwta3tLo2oIV0iWOQtRL7w GZ/h9OBCqK3ic8a3GEShFMgi/WbdQqcrwSv878Sp99CpSyOpPx2yasffiBjs3TzY njUbr0DG48bVYA0uEHMZxdN255RPBM+duwOkJWn9RcHntghyTCKKlKER4yCuihKP oLSOPOUjpxY2UDfBUjC6Cbqi7vB2cDrW1wPE8gd7uHlogu1WTGxO1U71WbgwjJYE fjlpN3VRFbhpUbVJZolKFJHImYYV1Z3d3vMru9wm1A9P97Q6XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDwakH1zXRV/YGoxyYy9rXvvafHpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hMWI3 ZTgwMS0wY2I5LTQ2MDItYjY5Ny1mNmRmMGMyYmViNDAvZmViMDM1ZDAtYTc0YS0z NzkxLThmZWUtZTk5NjMxOWQ2YTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTFiN2U4MDEtMGNiOS00NjAyLWI2 OTctZjZkZjBjMmJlYjQwL2ExYjdlODAxLTBjYjktNDYwMi1iNjk3LWY2ZGYwYzJi ZWI0MC5jcmwwHwYDVR0jBBgwFoAUmGoo7rfsZRYTSeoXdW+l0wdcOzYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hMWI3ZTgwMS0wY2I5LTQ2MDItYjY5Ny1mNmRm MGMyYmViNDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP+UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEM+qkz7OJJrHXvTSM+7fDKqMmcFp+v9UoKhPUFBUY4S8PUDuvSsXsFC C+nr5OmVesCYkeAafCHn8/QCz4q4WlhtEgO3IhD9FmrH0kuerrKil6pPeY7OwjDT G4wMRCJQR7bpAV7IjNkn+QUuVJT8J3DSd9QdYGr/IpkjeNgB9yYw5KG1BH7Du4Ho FOkjsGf3eHWUqLzVk+KjqUg6FwTMbbsKTf1jJ6zuPND1T7COuEABC/mCgOI3zM2c 8gWEdizLPEp/MIzCegTZvemUKyzZmrbUp7Uk4yg13XG76ORuHBcgYF0bEufhe2oU 3jWXCxWUj1SwqOpUBKNsjgSgT6suTwk= -----END CERTIFICATE-----Generated at Tue Jun 17 11:09:07 2025 by rpki-client